A SysOps Administrator is tasked with establishing a compliance baseline across all member accounts within an AWS Organization. The administrator wants to deploy a pre-defined package containing several AWS Config rules and their associated remediation actions as a single unit from the organization's management account.
Which of the following components or configurations are required to accomplish this deployment? (Select TWO.)
- An organization conformance pack deployed from the AWS Organizations management account or delegated administrator account.Cevap
- An Amazon S3 bucket in the administration account to store the conformance pack template file.Cevap
- CAn Amazon EventBridge rule configured in the management account to route config rules to the member accounts.
- DAn IAM policy with iam:PassRole permissions attached directly to the root organizational unit (OU).
- EA Systems Manager Patch Group configured in each target account to execute the conformance pack rules.
Cevap
Deploying an organization conformance pack from the AWS Organizations management account or delegated administrator account, and utilizing an Amazon S3 bucket in the administration account to store the conformance pack template file.
Deploying an organization conformance pack from the management account automatically deploys the packaged set of AWS Config rules and remediations to all member accounts. The YAML template that describes the conformance pack must be stored in an Amazon S3 bucket within the administrator account so that AWS Config can reference it during the deployment process.
Adım Adım Çözüm
Anahtar Kavram
AWS Config Conformance Packs allow administrators to deploy a unified package of compliance rules and remediation actions across an AWS Organization, relying on a template stored in Amazon S3 for centralized rollout.